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© Shared resource locking apparatus. 

© Disclosed is a hardware lock unit (27) for limiting 
concurrent use of a shared resource, such as a memory (29) 
by a plurality of devices, such as processors (22, 23), in a 
program controlled system. In such a system, devices 
wishing to use a shared resource make a use request to the 
lock unit and wait for an answer. The hardware lock unit 
determines whether the resource is free for access by a 
device or whether the resource is busy being accessed by a 
device. When the resource is busy the requesting devices are 



caused to wait. When the resource becomes free, the lock 
unit hardware selects one of the requesting devices and 
responds to its request to grant it use of the resource. 
Additionally, the lock unit may include hardware for prevent- 
ing a locks ble resource from being accessed by a device that 
is not its current owner and for preventing the current owner 
from accessing the resource more than a predetermined 
number of times. 



00 

0) 
O 



mum 

- BUS i 

• i«r>; 
tsai) : 



ntOCESSN 



srsTf* 

BUS 

limi- 
ne 
tsei) 



SVS1EN BUS 




0. 
Ul 



Croydon Printing Company lid. 



- 1 - 



0094841 



SHARED RESOURCE LOCKING APPARATUS 

Technical Field 

This invention relates to the management of 

shared resources in program controlled systems, and in 

particular to mechanisms for controlling access to such 

shared resources. 

Background of the Invention 

A computer system may include one or more parts, 

such as processors, peripheral devices, device controllers, 

and memories, which are utilizable by other devices of the 
system as resources for the execution of system tasks. For 
example, a processor may utilize a memory section as a 
resource for storage of results or as a source of data and 
instructions; thst processor may also utilize an 
input/output device as a resource for communicating with 
the outside world. Or a direct memory access (DMA) 
controller may utilize a memory as a resource for storing 
data and a peripheral device as a resource for providing 
data, while an I/O device may utilize a device controller 
as a resource for communicating with a processor or a 
memory. 

Simultaneous u«e by a plurality of devices of the 
same resource is likely to produce errors. For example, 
incorrect data will be obtained from memory, or the output 
of a printer will be garbled. It is therefoie important 
that such systems have means for providing an indication to 
devices interested in using a resource of whether that 
resource is free and available for use as a resource, or 
whether it is presently busy, acting as a resource for some 
device of the system and therefore unavailable to act as a 
resource for other devices. It is also desirable to 
provide therewith means of preventing a device wishing to 
access and utilize a busy resource from doing so until the 
resource becomes freed by its owner, that is, its current 
user. 
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Prior approaches to meeting these requirements 
have traditionally involved the use of software locks. A 
software lock is a prog ram- implemented scheme of providing 
a user with exclusive access to a shared resource. Such 
software locks have commonly taken the form of semaphores, 
which are flags, such as register or-memory word contents 
or flip/flop states, that indicate the busy/free states of 
an associated resource. Semaphore program routines test 
the status of the flag, generally through a test-and-set 
type of instruction, and prevent a device desirous of 
becoming a resource user from accessing the desired 
resource while its associated flag indicates that it is 
being utilized by some other user. 

The prior art locking mechanisms suffer from a 
number of disadvantages that generally flow from their 
software nature. The locks commonly require a program 
which tests the busy/free status of the resource and either 
locks the free resource for use by the new user and unlocks 
the resource when the user no longer desires it, or makes a 
decision as to what to do next and then directs the device 
to the selected activity when the resource is busy.. The 
program may be of- substantial length, and thus may occupy a 
significant portion of memory, particularly when numerous 
locks are used and the program must be replicated for each 
lock. 

Avoidance of replication of the lock program by 
incorporating it into a subroutine may alleviate the above 
problem, but in turn creates a new one. The subroutine 
calls and returns and associated trap-induced context 
switches during program execution take time and tie up 
resources, such as processors and memory, and thus 
adversely affect system efficiency. 

If the desired resource is found to be buky, the 
device wishing to use the resource must periodically 
recheck the status of the resource to determin wh n the 
resource becomes free. This not only requires additional 
program text to direct the device to recheck the resource 
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status, but also ties up other resources, such as the bus 
betw en the device and the resource, which are utilized in 
performing the status ch ck. 

While an interrupt may be utilized to inform the 

5 devices that a resource is free, and thus rechecking by the 
devices of the resource status may be avoided, interrupt- 
based schemes have the disadvantage that they interrupt not 
only all of the devices wishing to use the resource, but 
all other devices as well. This adversely affects system 

10 efficiency. Masking of the interrupts at devices not 
desiring access to the resource is not a satisfactory 
solution because of the software complexity which masking 
requires. 

Furthermore, informing all of a plurality of 
15 devices desirous of accessing a formerly busy resource that 
it has become free creates a free-for-all race to capture 
the resource, which requires a repetition of the above- 
described activities, along with their attendant 
disadvantages. 

20 There is the further possibility that in such a 

f ree-for-rall ,' one or more devices will become locked out 
and will seldom or -never obtain access to the resource. 
Neither the interrupt scheme nor the status check loop 
scheme provide a wholly satisfactory solution to this 

25 problem. In the above-described interrupt scheme, for 
example, provision of a means for selecting a device and 
selectively masking the interrupt to all but the selected 
device adds further software and complexity to the scheme. 

Similarly, in the above-rdescr ibed status check 

30 loop scheme which forces devices to perform a program loop 
to periodically recheck the status of a busy resource, the 
provision of an arbitration scheme to select one from a 
plurality of devices wishing to access the shared resource 
requires additional software and consumes time and system 

35 resources in executing the arbitration program 1 s 
instructions. 
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In addition to the disadvantages enumerated 
above, the prior art locking schemes have generally n t 
proved wholly effective in preventing access to locked, 
i.e. busy, shared resources. When implemented at the level 
5 of the executing program, locks have been accessible to 

programmers, and therefore it has been necessary to rely on 
cooperation from the programmers in observing the locks, by 
incorporating the locks into their programs, or at least in 
not willfully avoiding the locks. Thus, it has been simple 

10 for programmers to bypass the locks, often simply by 

ignoring them. Conversely, when implemented at the level 
of the operating system to avoid having to rely on use by 
the programmers, the locks could not efficiently be 
associated with every attempted access to a resource like 

15 shared memory, because of the severe overhead and resulting 
deterioration in system performance that lock-associated 
traps, or interrupts, produce. 

Lastly, as was mentioned above, software locks 
are generally constructed around the use of a test and set 

20 type of instruction. But many program controlled systems 
do not have this type of instruction, and therefore 
retrofitting of lock capability into such systems has 
generally been very difficult. 
Summary of the Invention 

25 The present invention is directed to solving 

these and other disadvantages of the prior art locking 
schemes. 

The invention provides a locking apparatus for 
program controlled systems which comprise a plurality of 

30 devices adapted to access resources and one or more 

resources adapted for access by a plurality of devices, and 
wherein each of the devices has associated therewith means 
for requesting access to a resource and for awaiting a 
response to the request. According to this invention, the 

35 locking apparatus associated with the shared resource 
comprises apparatus for determining whether the resource 
may currently be accessed by a device, apparatus for 
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selecting one from a plurality of requesting devices, and 
means for responding to the request of the selected device 
when the determining apparatus indicates that the resource 
may be accessed, to grant the selected device access to the 
5 resource. 

Preferably, each of the devices also has 
associated therewith means for signaling termination of 
access to a resource. The determining apparatus responds 
to the signaling means and to responding means to indicate 
10 that the resource may or may not be accessed, respectively. 
Preferably, the determining apparatus comprises apparatus 
for indicating the busy and free status of the resource; 
the indicating apparatus is responsive to the responding 
means to indicate busy status, and is responsive to the 
15 termination signaling means to indicate free status. 

Advantageously, the locking apparatus further 
includes means for preventing access to the resource by a 
requesting device when the determining apparatus indicates 
that the resource may not be accessed* The locking 
20 apparatus may further include means for preventing a device 
from accessing the shared resource when the device is not 
in possession of the right to access the resource. The 
locking apparatus may also include means for counting the 
number of accesses made by a device to the resource and for 
25 preventing further accesses when the count exceeds a 
predetermined limit. 

The locking apparatus frees the rest of the 
system from having to run a software lock program, and 
thereby eliminates the overhead and tie-up of system 
30 resources associated with the running of such a program. 
The device which is requesting access to a shared resource 
need only make a request for the resource and also 
preferably signal when it has terminated use of the 
resource, which functions can be accomplished with two 
35 instructions. 

The locking apparatus itself performs the lock 
significantly faster than could a mere software lock with 
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similar locking features. Thus the locking apparatus 
alleviates the system overhead associated with software 
locks. Furthermore, the locking apparatus substantially 
eliminates the other disadvantages, enumerated above, that 
are associated with such software. 

Since the selection of a device - arbitration - 
for access to a shared resource is done by the locking 
apparatus and only the selected device is activated to gain 
access to the resource, the delays, complexities, and waste 
of resources associated with the prior art means for 
resolving access to the shared resource, enumerated above, 
are also eliminated. 

Because the requesting device awaits a response 
to its request for resource access, the waste of resources 
and overhead associated with either rechecking the status 
of a resource or implementing an interrupt to handle this 
function are avoided. 

Since many devices have the capability of 
awaiting a response, as for example the "wait for slow 
memory" feature found on many conventional processors, and 
this locking scheme requires no special locking capability 
from processors, generally the locking apparatus can be 
easily retrofitted into existing program controlled 
systems. 

Furthermore, equipping the locking apparatus with 
the feature for denying access to devices not in possession 
of access grant to the shared resource insures that 
unauthorized accesses to the resource, which defeat the 
function of the lock, will be prevented. 

These and other advantages of the present 
invention will become apparent from the following 
description of an illustrative embodiment of the invention 
taken together with the drawing. 
Brief Description of the Drawing 

FIG. 1 is a block diagram of a portion of a 
programmable system which includes an embodiment of the 
present invention; 
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FIG. 2 is a block diagram of the lock unit of 

PIG. 1; 

PIG. 3 is a logic diagram of the lock processor 

of FIG. 2; 

5 PIG. 4 is a logic diagram of the address decoder 

of FIG. 3; 

FIG. 5 is a state diagram of the control circuit 

of PIG. 3; 

FIG. 6 is a logic diagram of the bounds registers 
10 unit of FIG. 2; and 

FIG. 7 is a logic diagram of the write counters 
unit of FIG. 2. 
Detailed Description 

This example illustrates the application of a 
15 locking unit constructed according to the present invention 
to controlling processor access to a shared memory in a 
multiprocessor environment. 
SYSTEM 

Turning now to FIG. 1, there is shown a portion 
20 of a multiprocessor system 20 which will serve to 

illustrate the principles of the invention. Shown is a 
portion of the system bus 21 to which are interfaced two 
processors 22, 23, a shared memory 29, and a lock unit 27. 
The system bus 21 may extend beyond the figure, and other 

25 devices, for example I/O units, communication link 

adapters, a bus controller, and other processors, memories, 
and lock units may be connected thereto. The various 
portions of the system 20 cooperate in performing system 
tasks. For example, the processors 22, and 23 perform 

30 computational tasks, obtaining their data and instructions 
from, and storing results in, the memory 29 which they 
share. Thus the memory 29 is used as a shared resource by 
the processors 22, 23. The lock unit 27 is associated with 
the shared memory 29 and controls access to the memory 29 

35 by the processors 22, 23, placing limits on the concurrent 
use of the memory 29 by the two processors 22, 23. The 
lock unit 27 assures that while one of the processor 22, 23 
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is accessing a designated portion or portions of the shared 
memory 29, it has exclusive use of that portion of 
memory 29. The lock unit 27 locks the other 
processor 22, 23 out from accessing that designated portion 
of the memory 29 and forces it to wait for access until the 
currently accessing processor 22, 23 gives up possession of 
that memory portion. 

The various devices are interfaced to the system 
bus 21 by system bus interfaces (SBI's) . Thus the 
processors 22, 23 are interfaced by the SBIs 24, 25, 
respectively, while the shared memory 29 and the lock 
unit 27 are both interfaced by the SBI 26. The shared 
memory 29 is connected to the SB I 26 through a shared 
memory interface (SMI) 28. Communications between the 
SBI 26 and SMI 28 proceed over an internal bus 32 which is 
also tapped by the lock unit 27. Additionally, the lock 
unit 27 has a connection to the SMI 28 via a signal bus 31. 

The processors 22 and 23, the shared memory 29, 
the SBIs 24, 25, and 26, the SMI 28, and the system bus 21 
may.be any suitable units such as are conventionally 
available in commerce. The particular structure of these 
various units will depend upon the organization and 
characteristics of the system 20; these factors are not of 
significance to this invention* 
LOCK UNIT 

Turning now to FIG. 2, there is shown a block 
diagram of the lock unit 27 of FIG. 1 and details of its 
interconnection to the SBI 26 and the SMI 28. The internal 
bus 32 is comprised of a plurality of links dedicated to 
functions such as are commonly available on interface 
units. The internal bus 32 includes an address bus 60, a 
data bus 61, a read command line 62, a write command 
line 63, a processor identification (ID) bus 64, an alarm 
line 65, and a return value line 66. 

The lock unit 27 is connected to the various 
links of the internal bus 32. The lock unit 27 includes a 
lock processor 33 which is responsible for monitoring the 
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activity on the bus 32, for performing the locking and 
unlocking operations on the shared memory 29 in response to 
commands observed on the bus 32, and for performing the 
various tasks of administering the lock unit 27. 
5 Information regard ing processor usage of various portions 
of the shared memory 29, each one of which is treated by 
the lock unit 27 as a separate resource, is stored in a 
lock registers unit 34 which is connected for communication 
with the lock processor 33. Additionally, the lock unit 27 
10 includes a bounds registers unit 35 and a write counters 

unit 36. The bounds registers unit 35 prevents accesses to 
a locked portion of memory 29 by a processor 22, 23 not 
currently in possession of the right to access that 
portion, i.e., any processor 22, 23 not currently 
15 designated by the lock unit 27 as the owner of that 

resource, thus ensuring that the lock cannot be bypassed 
and defeated. The write counters unit 36 keeps count of 
the number of writes that a processor 22, 23 performs on a 
resource during a single grant of access and raises an 
20 alarm when that number exceeds a predetermined limit, thus 
protecting the resource from an "insane" processor. The 
latter two units 35, 36 may be made optional, as indicated 
in FIG. 2, in that they enhance the operation of the lock 
unit 27, but the basic lock function can be performed by 
25 the lock unit 27 without them. Operation of the units 35 
and 36 becomes significant during processor accesses to the 
locked resource, but not during the operations of locking 
and unlocking the resource. 

The lock registers unit 34 of the lock unit 27 is 
30 a writable memory. It may, for example, be comprised of 
conventional storage registers, or any other random access 
memory. Each portion of the shared memory 29 that is to be 
treated within the system 20 as a separate resource has a 
lock register 71 of the lock registers unit 34 associated 
35 therewith. Thus the shared memory 29 may be comprised of 
as many portions, or resources, as there are lock 
registers 71 in the lock registers unit 34. A first field 
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of a lock register 71 referred to as the owner field 69, is 
used to store the binary-encoded ID of the processor 22, 23 
which is currently the owner of the portion of memory 
associated with that register 71. A second field of the 
5 lock register 71, referred to as the bit map field 70, is 
used to identify all processors currently requesting access 
to the associated memory portion. Each bit of the field 70 
represents a par ticular processor , and the binary value of 
the bit indicates whether the represented processor is or 

10 is not requesting access. In the present example, each 
field 69, 70 is 16 bits wide: hence the bit map field 70 
can represent up to 16 processors. Information on the 
owner and the requesting processors is written into and 
read out of the lock registers unit 34 under the control of 

15 the lock processor 33 which is connected for this purpose 
to the unit 34 by a read line 89, a write line 67, a data 
bus 68, and an address bus 88. 

Associated with each lock register 71, and hence 
with each resource in the shared memory 29, is a trio of 

20 registers 72-74 in the bounds registers unit 35. The 

register 72 is used to store an address which represents 
the upper bound of, the resource, while the register 73 is 
used to store an address which represents the lower bound 
of the resource. The third register, also referred to as 

25 the owner register 74, is used to store the ID of the 
processor 22, 23 which is the current owner of the 
associated resource. The bounds registers unit 35 is also 
any suitable writable memory. It is directly connected to, 
and monitors activities on, the address bus 60, the data 

30 bus 61, the read line 62, and the write line 63 of the 

internal bus 32. The unit 35 has CLEAR OWNER and SET OWNER 
input lines connecting it to the lock processor 33, and a 
LOCK NO. bus and an OWNER POUND output line connecting it 
to the write counters unit 36. Additionally, the bounds 

35 registers unit 35 has OWNER NOT FOUND and WRONG OWNER 

output lines connecting it to the SMI 28. These two lines 
comprise the signal bus 31. The function of these lines is 
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discussed further below. Further details of the bounds 
registers unit 35 are also described later herein, in 
reference to FIG. 6. 

Also associated with each lock register 71 , and 
5 hence with each resource in the shared memory 29, is a 

register 75 in the write counters unit 36. The register 75 
is subdivided into two fields 76, 77. The field 76 is used 
to hold the count of the number of writes that the current 
owner processor has performed on the associated resource 
0 during its current access of the resource. The field 77 
holds the limit value, which is the maximum number of write 
accesses allowed an owner to that resource in one access. 
The write counters unit 36 is once again any suitable 
writable memory. Aside from the inputs from the bounds 
15 registers unit 35, it also has a RESET COUNT control input 
from the lock processor 33 and is connected to the address 
bus 60, the data bus 61, the read line 62, the write 
line 63, and the alarm line 65 of the internal bus 32. The 
write counters units 36 is discussed in further detail in 
20 conjunction with FIG, 7. 

Each set of registers 71-75 associated with a 
single resource has a common base address. Only the 
offset, comprising the least significant 3 bits of the 
address of the registers 71-75 varies. The offsets 000-010 
25 are assigned to the registers 71-75, respectively. The 

addresses of the various sets of registers 71-75 are mapped 
into the address space reserved for memory in the 
system 20. The sets of registers 71-75 have consecutive 
base addresses, so that the most significant bits of the 
30 base addresses represent the address of the lock unit 27 as 
a whole. In the above scheme, each set of registers 71-75 
represents a lock, and from the viewpoint of a 
processor 22,23 each lock is a set of addresses having a 
common base address in the units 34-36. 
35 LOCK PROCESSOR 

Referring now to FIG. 3 f there is shown the 
configuration, in block diagram form, of the lock 
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processor 33 shown in FIG. 2. A register, referred to as a 
processor register 55, has its inputs connected to the 
processor ID bus 64 of the internal bus 32 (see FIG. 2) and 
temporarily holds processor ID information that passes over 
5 the bus 64. Outputs of the processor register 55 are 
connected to a first set of two sets of inputs of a 
selector 59# to a first set A of inputs of a comparator 58, 
and to a first set of three sets of inputs of a 
selector 56. The outputs of the selector 56 are connected 

10 to a register, referred to as an owner register 57, which 
is utilized for temporarily holding the ID of the 
processor 22, 23 which is the current owner of a selected 
resource. The contents of the owner register 57 may be 
reset to zero by a control circuit 38 acting over a RESET 

15 OWNER control input line. The outputs of the owner 

register 57 are connected to the processor ID bus 64, to 
the second set of inputs of the selector 59, to inputs of a 
"find first one" circuit 161, to the most significant bit 
lines of a bidirectional data bus 83, and to a second set B 

20 of • inputs of the comparator 58. Outputs of the 

comparator 56 are input to the control circuit 38; the 
first output is indicative of the two sets of inputs A and 
B of the comparator 58 being equal, a :d the second output 
is indicative of the input B from the owner register 57 

25 being null. 

The outputs of the selector 59 are connected to 
inputs of a set/reset bit circuit 119. The circuit 119 
translates the processor ID input from the selector 59 into 
the bit position which corresponds to that processor in the 

30 bit map field 70 of the lock registeris 71 (see FIG. 2) 
discussed above. The circuit 119 has outputs each 
connected to a corresponding bit in a bit map register 160. 
In response to commands supplied by the control circuit 38 
over SET BIT and RESET BIT control lines, the set/reset bit 

35 circuit 119 sets or resets the bit in the bit map 

register 160 which corresponds to the identified processor. 
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The "find first one" circuit 161 has a set of 
inputs each connected to a corresponding bit in the bit map 
register 160. Through these inputs the circuit 161 
monitors the bit values of the bit map register 160, The 
5 circuit 161 is also connected for input to the output of 
the owner register 57 from which it obtains the processor 
ID of the owner of a selected resource. The circuit 161 
translates the processor ID into the bit position 
corresponding to that processor in the bit map 
10 register 160. It then examines the status of the bit 

values of the bit map register 160, searching for the first 
bit value of 1 appearing to one side (i.e., searching 
either clockwise or counterclockwise) of the bit position 
obtained by translation from the input of the register 57. 
15 Upon finding that first bit position set to one, the 

circuit 161 translates that bit position into the processor 
ID which corresponds to that position, and outputs this ID 
to a second set of inputs of the selector 56. If the 
circuit 161 finds no bit position in the register 160 
20 except for the starting position set to one, it outputs a 
signal so indicating to the control circuit 38 over a MAP 
NULL line. , 

The bit map register 160 is connected for input 
and output to the least significant bit lines of the data 
25 bus 83. As was mentioned above, the most significant bit 
lines of the bus 83 are connected to the outputs of the 
owner register 57; these most significant bit lines are 
also connected to a third set of inputs of the selector 56 
for loading the owner register 57. 
30 The circuits 119 and 161 may be conventional 

logic arrays. The register 160 may be a conventional 
register, in this example 16 bits wide to correspond to the 
assumed 16 bit width of the bit map field 70 of the 
registers 71 of the lock registers unit 34. 
35 ADDRESS DECODER 

As shown in FIG. 3, an address decoder 37 has 
connections to the read line 62, the write line 63, the 
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data bus 61, and the address bus 60 of the internal bus 32. 
The decoder 37 connects to the control circuit 38 via a 
read line 81, a write lin 82, an LM read line 84, and an 
LM write line 85. The data bus 83 connects the decoder 37 
5 to other circuits in the lock processor 33, as was 

explained above. The decoder 37 also has connections to 
the lock registers unit 34 via a read line 89, a write 
line 67, a data bus 68, and an address bus 88. The 
decoder 37 selectively interconnects the internal bus 32, 

10 the lock registers unit 34, and the lock processor 33 

internals. The address decoder 37 is essentially a switch 
whose position is controlled by the addresses appearing on 
the address bus 60. 

FIG* 4 diagrams the structure of the address 

15 decoder 37, The decoder 37 includes a comparator 105 whose 
first set of inputs is connected to the high order bits of 
the address bus 60, and whose second set of inputs is set 
to the address of the lock unit 27. When the first set of 
inputs to the comparator 105 equals the second set of 

20 inputs, indicating that the lock unit 27 has been addressed 
over the bus 60, the comparator 105 generates an ENABLE 
signal over an input line to multiplexers 102 and 106, and 
to an AND gate 103. 

Mid-order bits of the address bus 60 which 

25 represent the remainder of the base address of a lock, 

i.e., of a set of registers 71-75, in the lock unit 27 are 
connected directly to the high order bits of the address 
bus 88 leading to the lock registers unit 34. The low 
order three bits of the bus 88 are tied to ground to 

30 generate the 000 base address offset representing the 

address of a lock register 71 in a set of registers 71-75. 

The low order three bits of the address bus 60 
are connected to inputs of an AND gate 104 and to inverted 
inputs of the AND gate 103. The output of the gate 104 

35 forms a SELECT control input to the multiplexers 102 
and 106. The output of the gate 103 forms an ENABLE 
control input to a tri-state gate 101. 
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The tri-state gate 101 has one port connected to 
the data bus 61 and a second port connected to a first port 
of th multiplexer 102. The gate 101 enables or disables 
flow of data from the multiplexer 102 to the data bus 61 in 
response to the ENABLE input from the AND gate 103 • 
However, the gate 101 has no effect on the flow of data 
from the data bus 61 to the multiplexer 102. Such tri- 
state gates are well known in the art. 

The multiplexer 102 has a second port connected 
to the lock processor data bus 83 and a third port 
connected to the data bus 68 of the lock registers unit 34. 
In response to a SELECT control input, the multiplexer 102 
connects its third port with either its first port or its 
second port. 

The multiplexer 106 has input A of first port and 
input C of a second port connected to the read line 62 of 
the internal bus 32. The write line 63 of the internal 
bus 32, is connected to input B of the first port and input 
D of the second port of the multiplexer 106. Inputs C and 
20 D of the first port are tied to ground, and inputs A and B 
of the second port are connected to the LM read line 84 and 
the LM write line 85, respectively, from the control 
circuit 38. A third port of the multiplexer 106 has its 
outputs A-D connected to the read line 89 and the write 
25 line 67 of the lock registers unit 34, and to the read 
line 81 and write line 82 of the control circuit 38, 
respectively. Like the multiplexer 102, the 
multiplexer 106 responds to its SELECT control input to 
connect Its third port with either its first port or its 
30 second port. 

When their ENABLE inputs are low, the tri-state 
gate 101 and the multiplexer 102 and 106 maintain their 
various ports disconnected from each other and thus prevent 
data and signals, except on the address bus 88, from 
35 passing through the address decoder 37. 

When the lock unit 27 is addressed over the 
address bus 60, the comparator 105 recognizes this and 
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generates the ENABLE signal which allows the tri-state 
gate 101 and the multiplexers 102 and 106 to respond to the 
state of the three low order bits of the address bus 60. 

When those bits are all zero and the ENABLE line 
5 is high, indicating that a register 71 of the lock 

registers unit 34 is being addressed, the output of the 
gate 103 is high and the output of the gate 104 is low. In 
response to the high output of the gate 103 the tri-state 
gate 101 allows data to pass from the multiplexer 102 to 

10 the data bus 61. In response to the low output of the 

gate 104 the multiplexer 102 connects its first port with 
its third port f thus connecting the second port of tri- 
state gate 101 with the data bus 68. The multiplexer 106 
responds to the low output of the gate 104 by also 

15 connecting its first port with its third port, thus 

connecting the read and write lines 62 and 63 with the read 
and write lines 89 and 67, respectively. Thus a connection 
is established between the internal bus 32 and the lock 
registers unit 34, 

20 When the three low order bits of the address 

bus 60 are not all zero or all one and the ENABLE line is 
high, generally indicating that a register of either the 
bounds registers unit 35 or of a write counters unit 36 is 
being addressed, the output of the gate 104 is low and 

25 therefore the states of the multiplexers 102 and 106 do not 
change from that just described. However, in such cases 
the output of the gate 103 is low, and the tri-state gate 
blocks flow of data from the multiplexer 102 to the data 
bus 61. Thus the connection between the internal bus 32 

30 and the lock registers unit 34 is unidirectional only, from 
the bus 32 to the unit 34. 

When the three low order bits of the address 
bus 60 are all ones and the ENABLE line is high, which 
indicates that a processor 22, 23 is attempting to lock or 

35 unlock a resource, the output of the gate 104 is high, and 
the multiplexers 102 and 106 connect their third port with 
their second port, thereby connecting the data bus 83 with 
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the data bus 68, the LM read and LM write lines 84 and 85 
with the read and write lines 89 and 67, respectively, and 
the read and write lines 62 and 63 with the read and write 
lines 81 and 82, respectively. Thus a data and signaling 
5 connection is made between the lock processor 33 internals 
and the lock registers unit 34, with an additional 
connection of the control circuit 38 to the read and write 
lines 62 and 63 of the internal bus 32. 
CONTROL CIRCUIT 

10 Returning to FIG. 3, aside from the connections 

already discussed, the control circuit 38 has outputs 
connected to the return value line 66 and the alarm line 65 
of the internal bus 32, to the CLEAR OWNER and SET OWNER 
lines leading to the bounds registers unit 35, and to the 

15 RESET COUNT line leading to the write counters unit 36. 
The control circuit 38 is a logic array defined by the 
state diagram of FIG. 5. The diagram of FIG. 5 will be 
explained in conjunction with the operational description 
of the lock unit 27 given below. 

20 INITIALIZATION 

Initialization of the lock unit 27 is performed 

by one or more of the processors 22, 23 of the system 20. 

* 

Preferably that task is assigned to the processor which 
will have been designated as the system 20 maintenance 
25 processor, for example the processor 22. The processor 22 
is supplied with bounds addresses of one or more portions 
of the shared memory 29 that will function as lockable 
resources. This information will have been developed in 
any appropriate manner, for example by a compiler at 

30 compile time or by the operating system during system 

operation. Through suitable means, such as a list stored 
in the shared memory 29 the processor 22 selects an 
available lock and dedicates it to a resource, writing 
appropriate initial values into the selected lock. This 

35 means may be a table stored in the shared memory 29, which 
lists the locks, their available or dedicated status, and 
the identification of the resources with which the 
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dedicated locks are associated. 

The initial values of a lock f s registers 71-75 
are the following : a null value for the owner field 69 of 
the lock register 71 to indicate that no processor is 
5 currently an owner of the resource; an idle value 

comprising all zeros for the bit map field 70 of the lock 
register 71 to indicate that no processors are currently 
waiting to use the resource; the address of the upper bound 
of the resource for the upper bound register 72; the 

10 address of the lower bound of the resource for the lower 
bound register 73; a null value for the owner register 74 f 
as for the register 71; and a value representative of the 
number of writes to be allowed to the resource between any 
lock and unlock operation - the limit value - for the 

15 register 75. The initial value for ■ the ■ register 75 is such 
that the limit number is written into both fields 76 and 77 
of the register 75. 

As was mentioned above, the registers 71-75 which 
comprise a single lock haye a common base address and only 

20 differ in the base offset/ which are the three least 

significant bits of the complete address. Therefore the 
processor 22 wr i tes. ea.;h register 71-75 of a lock 
separately. Through the SBI 24, th processor 22 outputs 
onto the system bus 21 (see FIG. 1), its ID, the address of 

25 a register, the data to be written into the register, and a 
memory write command. The SBI 26 detects the address on 
the system bus 21 and places the information from the 
system bus 21 onto the internal bus 32, sending the address 
of the register onto the address bus 60, the register data 

30 onto the data bus 61, the processor ID onto the processor 
ID bus 64, and a write signal onto the write line 63 (see 
FIG. 2) . 

The address decoder 37 of the lock unit 27 (see 
FIG. 3) responds to the address of the selected register 71 
35 and establishes connections between the internal bus 32 and 
the lock registers unit 34. The signals on the data bus 61 
and the write line 63 pass to the unit 34 on the data 
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bus 68 and the write line 67, while the address of the 
selected register 71 passes to the unit 34 from the address 
bus 60 via the address bus 88. The unit 34 responds by 
writing the addressed lock register 71 with the initial 
> values of the owner and bit map fields 69 and 70, 
respectively. 

The bounds registers unit 35 responds to the 
addresses of the registers 72-74 and writes the initial 
values into the addressed registers. Likewise the write 
3 counters unit 36 responds to the address of the register 75 
and writes the initial value into the addressed 
register 75. 

During initial ization, the registers of a lock 
respond in the same manner as storage locations of memory, 
5 such as the shared memory 29, respond within the system 20. 
When the registers of one lock are initialized, the 
processor 22 may initialize anothier lock for another 
resource. Throughout initialization, the control 
circuit 38 of the lock processor 33 of the lock unit 27 is 
20 in the ready state 0 (see FIG. 5) . 
LOCK OPERATION 

A processor 22, 23 executes a lock operation on a 
resource by attempting to read from word 7 of the lock of 
that resource. For example, assuming that it is 
25 processor 23 which wishes to lock a selected resource and 
thereby to become its exclusive owner, the processor 23 
sends out on the system bus 21 (see FIG. 1) its ID, a read 
command, and ah address comprising the base address of the 
resource's lock plus an offset of seven. The "wait for 
30 slow memory feature" of the processor is utilized, and the 
processor 23 goes into a wait state upon issuing the read 
request. It remains in the wait state until a value is 
returned to it from the lock unit 27 in response to the 
read request. The SB I 26 detects the address on the system 
35 bus 21 and places the information therefrom onto the 
internal bus 32, sending the address onto the address 
bus 60, the processor ID onto the processor ID bus 64, and 
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a read signal onto the read line 62 (see FIG, 2). 

Since each lock has only four registers 71-75 
with base address offsets of 0-4 , respectively, the base 
address offset of 7 does not match any of the 
5 registers 71-75 directly, so none of them respond. 

However, the address decoder 37 responds to the address and 
connects the lock registers unit 34 with the control 
circuit 38 and other lock processor 33 internals. That is, 
the decoder 37 connects the two data buses 68 and 83, the 

10 LM read line 84 and the read line 89, and the LM write 
line 85 and the write line 67. The decoder 37 also 
connects the two read lines 62 and 81, and the two write 
lines 63 and 82. As shown in FIG . 5, the control circuit 
38 responds to the read signal on the line 81 by asserting 

15 the LM read line 84 and making the transition from state 0 
to state 1. 

The lock registers unit 34 responds to the LM 
read signal on the read line 89 by outputting onto the data 
bus 68 the contents of the register 71 which is addressed 

20 by the base address present on the address bus 88. The 

control circuit 38 loads the contents of the owner field 69 
of the register 71. f rom the data bus 83 into the owner 
register 57 through the selector 56, a.^d loads the contents 
of the bit map field 70 of the register 71 from the data 

25 bus 83 into the bit map register 160. At this time, the 
control circuit 28 also gates the ID of the requesting 
processor 23 from the processor ID bus 64 into the 
processor register 55, and sets the selector 59 to gate the 
contents of the processor register 55 to the set/reset bit 

30 circuit 119. When these actions are completed the control 
circuit 38 goes to state 2, as shown in FIG 5. 

In the state 2, the control circuit 38 causes the 
comparator 58 to determine whether the contents of the 
processor register 55 and the owner register 57 are the 

35 same, or whether the contents of the owner register 57 are 
null, and to signal the result of the comparison to the 
control circuit 38 over the appropr iate signal ing line. 



- 21 - 



0094841 



The default condition resulting in no signals 
being returned from the comparator 58 to the control 
circuit 38 indicates that neither of the two above- 
mentioned conditions exist, 
5 The contents of the registers 55 and 57 being 

equal means that the requesting processor 23 is already the 
owner of the associated resource and that it is trying to 
lock the resource it already owns. The control circuit 38 
responds to this condition by going to state 3, as shown in 
10 FIG. 5, and asserting the alarm line 65 to signal an 

invalid lock attempt* The system 20 may respond to the 
raising of the alarm in any desired manner, such as with an 
interrupt. 

Failure of the comparator 58 to return a signal 
15 to the control circuit 38 indicates that the requested 

resource has an owner and is currently busy, locked by that 
owner, and therefore inaccessible to the processor 23. The 
control circuit 38 responds to this condition by going to 
state 6 (see FIG. 5) to cause the selector 59 to gate the 
20 contents of the processor register 55 into the set/reset 
bit circuit 119 and to and assert the SET BIT line to the 
set/reset bit circuit 119. This causes the circuit 119 to 
set the bit in the bit map register 160 which corresponds 
to the requesting processor 23 and thus to indicate that 
25 the processor 23 is waiting to use the associated resource. 

The contents of the owner register 57 being null 
indicate that the associated resource has no current owner 
and is unlocked, free to be locked and utilized by the 
requesting processor 23. The control circuit 38 responds 
30 to this condition by going to state 4 (see FIG. 5), causing 
the selector 56 to gate the contents of the processor 
register 55 into the owner register 57 and making the 
processor 23 the owner of the resource. 

The control circuit 38 then goes to state 5 and 
35 asserts the return value line 66 of the internal bus 32 to 
cause the SBI 26 to return a value to the requesting 
processor 23. This processor is still identified to the 
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SBI 26 as the processor 23 by its ID on the processor ID 
bus 64. The SBI 26 responds by sending over the system 
bus 21 to the processor 23 whatever value is present on the 
data bus 61 of the internal bus 32* The value sent is 
5 irrelevant, as its purpose is merely to indicate to the 
processor 23 that it has been given control of the 
requested resource. 

Upon receiving the value from the lock unit 27 in 
response to the read request, the processor 23 leaves the 

10 wait state and continues with its operation, accessing the 
locked resource as its exclusion owner. 

In the state 5 the control circuit 38 also 
asserts the SET OWNER line to the bounds registers unit 35 
and the RESET COUNT line to the write counters unit 36. 

15 Referring to FIG. 6, at the bounds registers unit 35 the 
SET OWNER line forms a control input to all of the owner 
registers 74. The SET OWNER signal causes the owner 
register 74 which is selected by the base address on the 
address bus 60 to be loaded with the processor ID appearing 

20 on the processor ID bus 64, which in this case is the ID of 
the new owner' processor 23. Thus the ID of the owner 
processor becomes associated with the identifying 
information -the upper and lower bounds- of the owned 
resource. 

25 Referring to FIG. 7, at the write counters 

unit 36 the RESET COUNT line forms a load (LD) control 
input to all of the registers 75. The RESET COUNT signal 
causes the count field 76 of the register 75 which is 
selected by the base address on the address bus 60 to be 

30 loaded with the contents of that register's limit field 77, 
over a link which connects the output of the limit field 
portion of the register 75 to the input of the count field 
portion of the register 75. Thus the write count of the 
newly locked resource becomes reinitialized. 

35 As shown in FIG. 5 from states 5, 3, and 6, the 

control circuit 38 makes a transition to state 15, asserts 
the LM write line 85 (see FIG. 3) to the lock registers 
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unit 34, and causes the contents of the owner register 57 
and of the bit map register 160 to be output onto the data 
bus 83. The lock registers unit 34 responds to the write 
signal on the write line 67 by loading the resource's lock 
5 register 71 with the information received over the data 
bus 68. The control circuit 38 then returns to its initial 
idle ready state 0 and the lock unit 27 is ready for its 
next transaction, 
UNLOCK OPERATION 
10 When the processor 23 no longer requires current 

access to the locked resource, it unlocks the resource and 
thereby frees it for use by another processor. The 
processor 23 executes an unlock operation on the resource 
by attempting to write into word 7 of the lock of that 
15 resource. The processor 23 sends onto the system bus 21 
(see FIG. 1) its ID, a write command, and an address 
comprising the base address of the resourced lock plus an 
offset of seven. The SBI 26 detects the address on the 
system bus 21 and places information from the bus 21 on the 
20 internal bus 32. 

As in the case of the read-activated lock 
operation discussed. above, the base address offset of 7 
does not match any of the registers 71-75 directly, so none 
of them respond. However, the address decoder 37 (see 
25 FIG. 3) again responds to the address and connects the lock 
registers unit 34 and the read and write lines 62 and 63 to 
the lock processor 33 internals. 

As shown in FIG. 5, the control circuit 38 
responds to the write signal on the line 82 by making the 
30 transition from state 0 to state 7 and asserting the LM 

read line 84 to the lock registers unit 34. As before, the 
lock registers unit 34 responds to the read signal on the 
line 81 by sending out on the data bus 68 the contents of 
the lock register 71 addressed by the base address present 
35 oh the address bus 88. The control circuit 38 then loads 
the contents of the owner field 69 of the register 71 from 
the data bus 83 into the owner register 57 through the 
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selector 56, and loads the contents of the bit map field 70 
of the register 71 from the data bus 83 into the bit map 
register 160. At this time, the control circuit 38 also 
gates the ID of the requesting processor 23 from the 
5 processor ID bus 64 into the processor register 55, and 
sets the selector 59 to gate the contents of the owner 
register 57 to the set/reset bit circuit 119. When these 
actions are completed, the control circuit goes to state 8. 

In the state 8, the control circuit 38 causes the 

10 comparator 58 to determine whether the contents of the 

processor register 55 are the same as the contents of the 
owner register 57. Non-equality of these contents 
indicates that the requesting processor 23 is not the 
current owner of the resource and, therefore, does not have 

15 the right to unlock that resource. The control* circuit 38 
responds to this condition by going to state 9, as shown in 
FIG. 5, and asserting the alarm line 65 of the internal 
bus 32 to signal an invalid lock attempt. The system 20 
may respond to the raising of the alarm in any desired 

20 manner, such as an interrupt. 

The contents of the register 55 and 57 being 
equal indicates that the requesting processor 23 is the 
current owner of the resource and, therefore , ; is properly 
unlocking that resource. The control circuit 38 responds 

25 to this condition by going to state 10. In state 10, the 
control circuit 38 causes the selector 59 to gate the 
contents of the owner register 57 into the set/reset bit 
circuit 119 and asserts the RESET BIT line to the set/reset 
bit circuit 119. The circuit 119 responds by clearing the 

30 bit in the bit map register 160 which corresponds to the 
owner processor 23, to indicate that the processor 23 is 
not waiting to use the associated resource. 

Next, the control circuit 38 causes the contents 
of the bit map register 160 and of the owner register 57 to 

35 be applied to the inputs of the "find first one- 
circuit 161 and activates the circuit 161. The circuit 161 
selects the next waiting processor to receive access to the 
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resource, by performing a rotating right search for a set 
bit in the bit map, starting at the bit of the previous 
owner processor 23, which is identified by the contents of 
the owner register 57. If no set bit is found by the 
5 circuit 161, that is, there are no processors waiting to 
use the resource and therefore all the bits in the bit map 
are zero, the circuit 161 asserts the MAP NULL line to the 
control circuit 38. In any case, the control circuit 38 
waits for the circuit 161 to settle, and when the "find 
10 first one" circuit 161 has settled, the control circuit 38 
assumes state 11. 

If the MAP NULL line has been asserted, the 
control circuit 38 makes a transition from the state 11 to 
state 13 and asserts the RESET COUNT line to the write 
15 counters unit 36, the CLEAR OWNER line to the bounds 

registers unit 35, and the RESET OWNER line to the owner 
register 57. The effect of the RESET COUNT signal at the 
write counters unit 36 has been described above. Referring 
to FIG. 5, at the bounds registers unit 35, the CLEAR OWNER 
20 line forms a control input to all of the owner 

registers 74." The CLEAR OWNER signal causes the owner 
register 74 identified by the base address on the address 
bus 60 to be cleared, loaded with all zeros, to indicate 
that the associated resource is unlocked and free to be 
25 locked by a processor. Similarly, the effect of the RESET 
OWNER signal on the owner register 57 (see FIG. 3) is to 
cause the contents of the register 57 to be reset to all 
zeros. 

Following the states 9 and 13, the control 
30 circuit 38 goes to state 14, where it outputs the contents 
of the owner register 57 and the bit map register 160 onto 
the data bus 83 and asserts the LM WRITE line to the lock 
registers unit 34. The lock registers unit 34 responds to 
the LM WRITE signal by loading the data sent to it by the 
35 control circuit 38 from the data bus 68 into the lock 

register 71 identified by the base address on the address 
bus 60. In the case of the transition from the state 9, 
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this has the effect of restoring to the lock register 71 
contents which it had before the unauthorized unlock 
operation was attempted by the processor 23. Hence/ if at 
that time the associated resource was locked by a 
5 processor, it remains locked to that processor. In the 
case of the transition from the state 13, however, the 
effect is to load the lock register 71 with all zeros and 
thereby to unlock the associated resource* 

Following the completion of activities in the 
10 state 14, the control circuit 38 returns to its idle ready 
state 0. 

Returning now to a consideration of the state 11 
in FIG. 5, if the MAP NULL line has not been asserted by 
the "find first one" circuit 161, the control circuit 38 

15 makes a transition from the state 11 to state 12 and causes 
the selector 56 to gate the output of the "find first one" 
circuit 161 into the owner register 57. The output of the 
circuit 161 is the ID of the processor selected by the 
circuit 161 to be the new owner of the resource under 

20 consideration* At that time, control circuit 38 also 

causes the contents of the owner register 57 to be output 
onto the processor' ID bus 64 to replace thereon the ID of 
the former owner processor 23. 

From the state 12, the control circuit 38 makes a 

25 transition to the state 5 of the lock operation, to cause 
the resource to become properly locked to its new owner. 
During this lock operation, the control circuit 38 
progresses through the states 5 and 15 back to state 0, in 
the manner described above for the lock operation. 

30 LOCKED RESOURCE ACCESS 

If a memory address is within a portion of the 
shared memory 29 that is lockable, that is, if it falls 
between the upper and lower bounds deliminating a shared 
resource, a processor requesting to read from or to write 

35 into that memory address will be granted permission to do 
so only if it has previously locked the resource containing 
the address and is its current owner. If a memory address 
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lies within a portion of the shared memory that is not 
lockable, the address is treated as a shared read-only 
resource, and any processor can read it at any time, but a 
processor is generally not allowed to write that address. 
5 From the viewpoint of the lock unit 27/ (see 

FIG. 2) a memory read or a memory write operation begins 
with the receipt by the SBI 26 of a memory read request or 
a memory write request, respectively, from a processor, for 
example the processor 22. The address appearing on the 
10 address bus 60 of the internal bus 32 is that of a location 
in the shared memory 29 and not that of any word within the 
lock unit 27. Therefore, the lock access circuitry 
described above in conjunction with the initialization, 
lock, and unlock processes is not utilized, and the lock 
15 processor 33 remains idle. 

Turning to FIG. 6, the shared memory address 
arrives at the bounds registers unit 35 on the address 
bus 60 and the ID of the requesting processor 22 arrives at 
the unit 35 on the processor ID bus 64. Each set of 
20 registers 72-74 in the bounds registers unit 35 has a trio 
of comparators 44, 45, 46 associated therewith. The memory 
address enters all, comparators 44 and 45 along one set of 
each of their inputs and the processor ID enters all 
comparators 46 along one set of each of their inputs. A 
25 second set of inputs of each comparator 44 is connected to 
the associated upper bound register 72, a second set of 
inputs of each comparator 45 is connected to the associated 
lower bound register 73 r and a second set of inputs of each 
comparator 46 is connected to the associated owner 
30 register 74. At each set of registers 72-74, the memory 
address is compared with the upper address bound in the 
comparator 44 and with the lower address bound in the 
comparator 45, while the processor ID from the bus 64 is 
compared with the ID of the owner processor in the 
35 comparator 46. 

If a comparator 44 finds that the upper bound is 
greater tban or equal to the memory address, it sets its 
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output high. Similarly, if a comparator 45 finds that the 
lower bound is less than or equal to the memory address, it 
sets its output high, and if a comparator 46 finds the two 
processor IDs being input to it to be the same, it sets its 
5 output high. 

The outputs of each pair of comparators 44 and 45 
are connected to the inputs of an associated AND gate 98. 
The output of the AND gate 48 goes high when the memory 
address lies within the upper and lower bounds of the 

10 associated resource. The outputs of all of the AND 

gates 48 are connected to inputs of an encoder circuit 50. 
When none of the gates 48 have a high output, the 
circuit 50 asserts an OWNER NOT FOUND line to the SMI 28 
(see FIG. 2). When one or more of the gates 48 have a high 

15 output, the circuit 50 asserts an OWNER FOUND line to the 
write counters unit 36 and outputs the base address 
corresponding to the lock, or set of registers 72-^74, whose 
AND gate 48 has a high output, on a LOCK NO. bus to the 
write counters unit 36. if more than one AND gate 48 has a 

20 high output, the encoder selects one of them for purposes 
of generating the lock number. 

The outputs of each of a pair of 
comparators 44,45 are also connected to the inputs of an 
associated AND gate 47. An inverted input of each AND 

25 gate 47 is connected to the output of the corresponding 
comparator 46. Thus the output of an AND gate 47 is high 
only when the memory address lies between the upper and 
lower bounds of the associated resource but the requesting 
processor is not the owner of that resource. The outputs 

30 of all of the AND gates 47 are connected to inputs of an OR 
gate 49, whose output connects to a WRONG OWNER line 
leading to the SMI 28. Thus the WRONG OWNER line is 
asserted any time a processor tries to access a lockable 
resource of which it is not the current owner. 

35 Referring now to FIG. 7, the LOCK NO. bus and the 

OWNER FOUND line from the bounds registers unit 35 are 
connected to circuitry at each register 75. As the 
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circuitry is identical at each register 75 only the 
circuitry of a single register 75 is shown in FIG, 6 and 
explained here. 

The OWNER FOUND line is connected to the select 
5 (SEL) input of a multiplexer 51. The LOCK NO. bus is 
connected to a first input port of the multiplexer 51, 
while the second port is connected to the address bus 60 of 
the internal bus 32. The output of the multiplexer 51 
forms the address input to the register 75. The 
10 multiplexer 51 connects the address bus 60 input to its 

output when its SEL control input is low, and connects its 
LOCK NO. bus input to its output when the SEL control input 
is high. Thus at times when the LOCK NO. bus is low, such 
as during the initialization of the lock unit 27, during 
15 the locking or unlocking operation, and during a shared 
memory 29 access operation when the bounds registers 
unit 35 asserts the OWNER NOT FOUND or WRONG OWNER lines, 
the write counters unit 36 takes addresses from the address 
bus 60. Only during a shared memory 29 access operation 
20 when the bounds registers unit 35 asserts the OWNER FOUND 
line does the write counters unit 36 take addresses from 
the LOCK NO. bus. . 

The OWNER FOUND line is also connected to an 
input of an AND gate 53 and to an inverted input of an AND 
25 gate 52. The write line 63 forms a second input to the 
gates 53 and 52. The output of the gate 52 forms a WRITE 
command input to the register 75, while the output of the 
gate 52 is connected to a decrement (DEC) control input of 
the register 75. Thus when the write counters unit 36 is 
30 being addressed from the address bus 60, a signal present 
on the write line 63 acts as a conventional WRITE command. 
But when the OWNER FOUND line has been asserted by the 
bounds registers unit 35, the presence of a signal on the 
write line causes the contents of the count field 76 of the 
35 register 75 addressed by the LOCK NO. bus signals to be 
decremented, to indicate that the current owner processor 
of the associated resource has written into that resource. 
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If the owner processor is making a read access to th 
resource, the outputs of both AND gates 52 and 53 remain 
low and the register 75 do s not change its contents. 
Thus, the write counters unit 36 records only write 
accesses to shared resources and ignores read accesses to 
shared resources. 

If the value in the count field 76 reaches zero, 
indicating that the owner processor has made as many write 
accesses to the associated resource as it is allowed during 
its current ownership, an overflow signal is output by the 
register 75 onto an OVERFLOW line. The OVERFLOW lines of 
all registers 75 form inputs to an OR gate 54, whose output 
is connected to the alarm line 65 of the internal bus 32. 
Thus, when one or more OVERFLOW lines go high, the alarm 
line 65 goes high also. The system 20 may react to the 
raising of the alarm in any appropriate manner, for example 
with an interrupt. 

Returning to a consideration of FIG. 2, during a 
shared memory read operation the SMI 28 ignores the OWNER 
NOT. FOUND line. It allows the memory read transaction to 
occur if the WRONG OWNER line has not been asserted, and 
raises the alarm li/ie 65 of the internal bus 32 if the 
WRONG OWNER line has been asserted b} the bounds registers 
unit 35. However, during a shared memory write operation, 
the SMI 28 responds to the states of both lines of the 
signal bus 31, and raises the alarm line 65 if either line 
of the bus 31 has been asserted, allowing the memory write 
transaction only if neither line of the bus 31 has been 
asserted. 

Of course, it should be understood that various 
changes and modifications to the illustrative embodiment 
described above will be apparent to those skilled in the 
art. For example, the lock unit may be interfaced to the 
system bus by its own dedicated system bus interface. Or, 
the lock unit can be implemented as a part of th shared 
memory controller. Instead of performing a rotating search 
to arbitrate between requesting devices, the lock unit may 
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utlliz some other arbitration scheme, for example a 
first-rcome first-served scheme, or a prioritized scheme. 
The lock unit may also include a deadlock detection and 
recovery mechanism, for example a parity timer that limits 
the time for which an owner processor can keep control of a 
locked resource* For lock unit fault detection, two lock 
units may be operated in parallel and their results 
compared oh each transaction* Or, for maintenance and 
error detection purposes, the lock unit may return a 
predetermined value to a representing processor as a 
response to its request to access a resource. 
Additionally, the system may be adapted to prevent 
preemption of a process while its associated processor owns 
a resource, to eliminate delays for other processors 
waiting for the resource. These and other changes and 
modifications can be made without departing from the spirit 
and the scope of the invention and without diminishing its 
attendant advantages. It is therefore intended that all 
such changes and modifications be covered by the following 
claims. 
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CLAIMS 

1. In a program controlled system, an arrangement 
(27) for controlling access to a resource (29) by a 
plurality of devices (22 r 23) 

5 CHARACTERIZED IN THAT 

the arrangement comprises 

apparatus (34) for determining the idle or busy 
status of the resource, and 

apparatus (33) for granting a selected one of the 
10 requesting devices access to the idle resource. 

2. An arrangement in accordance with claim 1 
CHARACTERIZED IN THAT 

the arrangement (27) further comprises apparatus 
(35) for preventing access to the resource by certain of 
15 the devices (22, 23). 
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